Skip to main content

Privacy policy

WWe take the protection of your personal data very seriously and treat your personal data confidentially and in accordance with applicable data protection laws. The following privacy policy of Aristo Pharma GmbH explains how Aristo Pharma GmbH collects, manages, and uses information about individuals.

This privacy policy applies to Aristo Pharma GmbH, Wallenroder Str. 8-10, 13435 Berlin, Germany.

Aristo Pharma GmbH may replace, modify, remove, or otherwise update this privacy policy at its sole discretion without prior notice. Such changes are made to ensure that you are always fully informed about what types of personal data Aristo Pharma collects, how it uses them, and under what circumstances Aristo Pharma discloses such information.

1. Data Controller

The data controller within the meaning of the General Data Protection Regulation (GDPR) for the processing of personal data on this website is:

Aristo Pharma GmbH
Wallenroder Straße 8–10
13435 Berlin
Germany

Phone: +49 (0) 30 71094-4200
Email: info@aristo-pharma.de


2. Data Protection Officer

You can contact our Data Protection Officer at:

fox-on Datenschutz GmbH
Pollerhofstraße 33a
51789 Lindlar

Email: DSB@fox-on.com
 

3. General Information on Data Processing

The protection of your personal data is of great importance to us. We treat your personal data confidentially and in accordance with applicable data protection laws, in particular the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG).

Personal data refers to any information relating to an identified or identifiable natural person. This includes, for example, name, address, email address, or IP address.

This Privacy Policy explains what personal data we process in connection with the use of our website and in other contexts, and for what purposes this is done.
 

4. Legal Basis for Data Processing

We process personal data exclusively on the basis of legal authorization.

The most important legal bases are:

  • Art. 6(1)(a) GDPR – Consent of the data subject
  • Art. 6(1)(b) GDPR – Processing for the performance of a contract or for the implementation of pre-contractual measures
  • Art. 6(1)(c) GDPR – Processing to fulfill legal obligations
  • Art. 6(1)(f) GDPR – Processing based on legitimate interests

To the extent that processing is based on legitimate interests, our interest lies in particular in the secure, stable, and cost-effective provision of our online services.
 

5. Retention Period

We store personal data only for as long as is necessary for the respective processing purposes or as required by statutory retention obligations.

Where statutory retention periods apply, data is stored for up to ten years, in particular due to commercial and tax law requirements.

Once the respective purpose no longer applies or statutory retention periods have expired, the data is deleted or anonymized.

6. Data Processing When Visiting Our Website

 

6.1 Server Log Files

When you visit our website, information is automatically collected by the web server and stored in so-called server log files.

In particular, the following data is collected:

  • Browser type and browser version
  • Operating system used
  • Referrer URL (previously visited page)
  • Hostname of the accessing computer
  • Date and time of the server request
  • IP address

This data is not merged with other data sources.

Processing is carried out to ensure the smooth operation of the website and to guarantee system security.

The legal basis is Art. 6(1)(f) GDPR.


7. Cookies and Consent Management

Our website uses cookies. They serve to make our offering more user-friendly, effective, and secure. Cookies are small text files that your browser stores. You can find more detailed information about the cookies used in the respective sections of this statement. You can revoke or grant your consent to non-mandatory data processing at any time by accessing the “Privacy Settings” in the footer of our website.


CCM19 (Consent Management)

To manage your consent to the storage of certain cookies, the use of certain technologies, and the integration of third-party providers, we use the service “CCM19” provided by Papoo Software & Media GmbH, Auguststr. 4, 53229 Bonn. When you visit our website, a connection is established with the CCM19 servers to obtain and document your consents and other declarations regarding cookie usage. For this purpose, CCM19 stores cookies in your browser that associate the consents you have granted or their revocation. The collected data is stored until you request its deletion, delete the CCM19 cookie, or the purpose for data storage no longer applies. Statutory retention obligations remain unaffected.

CCM19 is used to obtain the legally required consents for the use of cookies and third-party services. The legal basis is Art. 6(1)(c) GDPR in conjunction with the TDDDG.


Necessary Cookies

In addition, the following technically necessary cookies are used:

  • Consent Cookie: Stores whether you have consented to the use of non-essential cookies. The duration is 100 minutes.
  • Session Cookie: Enables the assignment of your requests to the same session; is deleted as soon as the session ends.

These cookies are technically necessary to display the website and provide certain functions. Processing is based on Art. 6(1)(f) GDPR, as we have a legitimate interest in the technically error-free and optimized provision of our services.

You can configure your browser to notify you when cookies are set, to allow cookies only on a case-by-case basis, to exclude the acceptance of cookies for specific cases or generally, and to enable automatic deletion when closing the browser. If you disable cookies, the functionality of our website may be limited.


8. Web Analytics

Google Analytics

Our website uses Google Analytics, a web analytics service provided by

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

Google Analytics uses cookies that enable an analysis of the use of our website.

In particular, the following data may be processed:

  • truncated IP address
  • device information
  • browser information
  • usage data
  • interactions on the website

We use Google Analytics with IP anonymization enabled, so that your IP address is truncated within the European Union or the European Economic Area.

The use of Google Analytics is based exclusively on your consent pursuant to Art. 6(1)(a) GDPR. The data retention period is 14 months. Personal data may be transferred to the United States. Google is certified under the EU-US Data Privacy Framework.

For more information, please visit:https://policies.google.com/privacy
 

9. Online Marketing

Google Ads / Google Marketing Platform

We use Google services to analyze the effectiveness of our advertising campaigns and to display online ads.

Provider:
Google Ireland Limited
Dublin, Ireland

As part of these services, cookies may be used to track, for example:

  • which ads were displayed
  • whether users clicked on ads
  • whether a desired action occurred after an ad click (conversion)

Processing is carried out exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR.


10. Integration of external content and services

Google Maps

Our website uses the map service Google Maps.

Provider:
Google Ireland Limited
Dublin, Ireland

When you visit a page with an embedded map, a connection is established with Google servers. Your IP address may be transmitted in the process.

Use is based exclusively on your consent pursuant to Art. 6(1)(a) GDPR.

Further information: https://policies.google.com/privacy


YouTube

Videos from the YouTube platform are embedded on our website.

Provider:
Google Ireland Limited

When a video is played, a connection is established to YouTube servers. Personal data may be processed in the process.

Use is based on your consent pursuant to Art. 6(1)(a) GDPR.


Google Fonts

To ensure consistent font display, our website uses Google Fonts.

Provider:
Google Ireland Limited
Dublin, Ireland

When you visit the website, your browser loads the required fonts from Google servers. In doing so, your IP address may be transmitted to Google.

Processing is based on Article 6(1)(f) of the GDPR or your consent via the consent management tool.


Google reCAPTCHA

To protect our website from spam and automated requests, we use the Google reCAPTCHA service.

The service analyzes the behavior of website visitors based on various characteristics, such as:

  • IP address
  • Mouse movements
  • Time spent on the website

Processing is based on Article 6(1)(f) of the GDPR.


DocCheck

For certain specialized information, we use the authentication service DocCheck.

Provider:
DocCheck Medical Services GmbH
Vogelsanger Straße 66
50823 Cologne

Authentication is performed via DocCheck’s systems. For more information on data processing by DocCheck, please visit: https://info.doccheck.com/de/privacy

 

11. Social Media Sharing

Our website includes features for sharing content on social networks.

These are so-called sharing links to:

  • Facebook
  • X (formerly Twitter)
  • WhatsApp

Data is only transferred to the respective providers when you actively click the corresponding share button.

 

12. Contact Form

When you contact us via the contact form, the data you enter will be processed to handle your inquiry.

Required fields are marked accordingly.

Processing is based on your consent pursuant to Art. 6(1)(a) GDPR.

The data will be deleted as soon as the purpose for storage no longer applies and there are no legal retention obligations.

 

13. Job Applications

You can apply to us via our website or by email.

In doing so, we process the following data in particular:

  • Name
  • Contact information
  • Application documents
  • Qualification data

Processing is carried out for the purpose of conducting the application process.

The legal bases are:

  • Art. 6(1)(b) GDPR
  • § 26 BDSG

Application data will be deleted no later than six months after the conclusion of the application process, provided that no further storage is required.

 

14. Business Partners and Contacts

We process personal data of business partners and their contacts.

This includes, in particular:

  • Name
  • Contact details
  • Company affiliation
  • Professional position

Processing is carried out for the purpose of fulfilling contractual relationships and for business communication.

The legal basis is Art. 6(1)(f) GDPR.

 

15. Events

In the context of events organized by Aristo Pharma GmbH, we process personal data of participants.

Purposes of processing

Processing is carried out in particular for:

  • Organization and execution of events
  • Management of participant registrations
  • Communication with participants in connection with the event
  • Fulfilling regulatory documentation obligations, particularly in connection with pharmaceutical compliance requirements

Categories of Processed Data

In particular, the following personal data may be processed:

  • Name
  • Contact details (e.g., email address, phone number)
  • Professional information (e.g., employer or professional role)
  • Details regarding participation in the respective event
  • Any additional information provided during registration

Recipients of the data

Your personal data may be transferred to service providers who assist us in organizing and conducting events, such as event agencies, event platforms, or IT service providers.

Where necessary, personal data may also be transferred to the relevant medical associations, for example, for the recognition of continuing education credits.

Legal basis for processing

Processing is based on:

  • Art. 6(1)(b) GDPR (Performance of the participation agreement)
  • Art. 6(1)(f) GDPR (Organization of events and compliance with regulatory and industry-specific requirements)
  • where applicable, Art. 6(1)(a) GDPR (Consent), to the extent that consent is obtained in individual cases

Retention period

Personal data will only be stored for as long as necessary to conduct the event and to fulfill legal or regulatory documentation obligations.

 

16. Rights of data subjects

You have the following rights:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object to processing (Art. 21 GDPR)

If the processing is based on your consent, you may withdraw it at any time with effect for the future.om

Go to top